https://www.reddit.com/settings/data-request
Having worked at a company that had a massive influx of GDPR requests we weren’t prepared for, this one could actually cause them some trouble if Reddit don’t have that process properly automated.
They do not have it automated. I put in a request 2 weeks ago and still haven’t heard back.
CCPA and GDPR lawyers
Yeah same. They might be holding back until the last minute deliberately in some 4D chess move, but like you I think it’s more likely some poor soul is preparing them manually.
I don’t think they want that, they have a month before they have to come back with something or you can escalate it to a supervising body. Imagine getting taken to court because redditors flooded your GDPR response process
Idk, Mr. Inspired-by-Musk might not know or care.
When can you complain about the slow response?
I would not at all be surprised if the GDPR dictates a set time period to respond backed up by fines.
the GDPR gives them 30 days to honor your request I think?
Yeah it’s 30 days, though they can push it up to 90 if they have a good reason. They have to inform you of that though.
You can also request it again every 30 days… just saying.
And to be fair, a large influx of data requests is probably considered a good reason.
They still have to comply within the 90 day period. If they can’t comply in that timeframe a warning or a fine could be issued.
They have 30 days I believe.
You could consider making a data request first and after they respond, make a deletion request when you’d like your account removed. This will use even more resources.
If they do not respond to either the data request or deletion request (or do not fulfil these requests fully), you can make a complaint with your local data protection office or the one Reddit is based in (maybe Ireland?). Make sure you invoke GDPR using the correct language for your request.
Here’s a template letter of how to do so under GDPR. You must request your data or the deletion of you data using the correct legal framework (quoting the correct legislation) and these templates make this easy. Plus they cover more types of data than just your posts and comments.
Whenever I do this with other companies I do a SAR to get a copy of the data, then a RTBF request to get the data removed, then another SAR to see what they retained.
A significant number say they delete your data and then happily send it back to you a coupla months later when you make an SAR. The ICO loves those ones.
That’s a great idea, I’ll do this too.
Having also worked somewhere that was under GDPR, weaponised bureaucracy like this can really be used to consume staff resources.
Edit: it looks like Reddit have changed their data request form. To make a full GDPR request, with the additional data in the template, you’ll need to email your request to Reddit ([email protected]).
You can not only request your data, but also request information regarding how your data is processed and also about psudo-anonymised data. These are much harder to automate a response to.
See here for examples from the template:
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipient to whom the personal data have been or will be disclosed;
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- where the personal data are not collected from the data subject, any available information as to their source;
- the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for me.
I did my part
Just did it for my 10yr old 150k karma account.
Just did it, fuck 'em.
I put mine in today.
I loaded up Reddit and did my part. For those who still have Reddit accounts, upvote the original to keep it at the top
Kk
Posting pictures of Jon Oliver does nothing. A German reddit mod told me, that the admins themselves suggested that the German mods should do this kind of protest instead of keeping the sub in NSFW mode 🤡. The NSFW action + blackout was the only thing that actually hurt them.
Making popular subreddits NSFW clearly hurts them, because Reddit has been forcing them to switch it off. They’ve also been forcing subreddits to reopen if they’ve been restricted. So those two options aren’t really very viable for every sub.
I suspect this one hurts them too because this post is not visible any more unless you go directly to it or via the pics subreddit - despite it being newer and having more votes than other posts in there that are on the homepage and in popular.
If even a quarter of the people that upvoted this post clicked through to the request form they’re gonna have tens of thousands of these requests to deal with.
Well, switching to NSFW not only limits their revenue to to their self-declared restriction on advertising in those subs, but - and I think this is more important - those subs go dark for the purpose of reddit’s front page. They made the change a couple years ago to exclude all nsfw subs from r/all. There was no need to; r/best was already r/all without the NSFW subs. Any sub that is excluded from r/all is invisible to the eyeballs which pay the bills because that’s the default home page.
Is there even anything that can be done at this point?
Quite a longer process I think. In the end the only nice thing I got from this whole mess is to discover lemmy. I also suggest everyone to check Mastodon as Twitter alternative. Fk monopolies ✊️
Lemmy is so nice, I almost didn’t feel the switch between platforms it’s pretty much the same.
This is exactly what I did one week ago when I decided to leave Reddit. They still haven’t gotten back to me
Yeah I did this not to just mess with them. I did it cause I’m leaving and I want my data.
This is the same for me! “A message will be sent to your reddit inbox” complete silence. Though the submission message said it could take 30 days or something.
The GDPR states, that request must be completed within a month. In case you’re from Europe, you could report reddit to your local authorities if they don’t respond within that time frame. A single report won’t probably cause a reaction. But several reports from several individuals on the other hand…
Oh I wasn’t aware of this. Very tempting. Now I lowkey wish they miss the deadline on one of the six accounts I requested the data for, so I can do some European style trolling.
